This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft File: MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json) Hash identifier: qQgtFheR4P2LxFVd+1v+vnLH6E2RqDbdBM51A+3A5hE= Subject key identifier: 65:76:76:59:7A:A7:A4:15:16:08:42:B1:AF:01:3A:50:41:04:C2:43 Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Certificate serial: 019BF9BFC555B98EDA676507640E842B8EA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft Manifest number: 1889 Signing time: Mon 26 Jan 2026 10:00:53 +0000 Manifest this update: Mon 26 Jan 2026 10:00:53 +0000 Manifest next update: Tue 27 Jan 2026 10:00:53 +0000 Files and hashes: 1: 53U4m7unV2mibWFu1QO-NpnrTnw.roa (hash: 0i1ZcWrwIpK4hLghAwyHvwSPfTHGRkTgHaWZ5gxvSPY=) 2: EGceg2KC2veG2ubJ67lLnyLOjtI.roa (hash: wY6zYtQUbn46Y33mgpfT8vGawedlaPHOCiudGF0vIQ4=) 3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: RUZb1r61IxtuZSxmSKur9OU73/dn4R1wah8c7hbl4Ns=) 4: Mqf6CjvjiOytmfKew5wMIrFMct0.roa (hash: WNuu5876X1n/9Z35upFbegg0OHBkwV/0aP5LxFUgXqw=) 5: UuBKTrHp7oCa8BmYah6YqG_WpE4.roa (hash: tTnI66dQzMxv5Ywe6+42iKyT+lMADvw6/O6b+DszdFE=) 6: XFzx0VxKKF-e5w2Lr2cCrOGeanM.roa (hash: UP6bd6FhB5DBxfN1nWdp5xVVm3xQKWBg64Qhp36elmc=) 7: djutc2DoA1hWRG7fT1m5Cpn9qZU.roa (hash: u5Mvq8ua5/tWNsyrKv37TSv8GaDv2rIuUGdGbP31zlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:bf:c5:55:b9:8e:da:67:65:07:64:0e:84:2b:8e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Validity Not Before: Jan 26 10:00:53 2026 GMT Not After : Jan 27 10:00:53 2026 GMT Subject: CN=657676597aa7a415160842b1af013a504104c243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:2b:6a:cd:92:ef:6c:30:fa:f4:ab:08:34: c8:07:67:a6:60:dc:6c:ee:8c:80:d9:f5:81:33:a7: 84:6f:17:31:be:10:14:42:d6:79:3c:e6:f6:79:5e: 9f:b9:16:06:5f:ef:42:36:69:12:04:3e:d6:29:27: 69:2b:c6:0e:11:0e:5e:1a:3f:0b:37:e3:24:2d:d9: b4:96:d7:84:a8:e3:21:78:4d:e6:4f:cd:5f:18:52: 46:6c:9e:33:d7:9a:25:22:1e:cb:37:3e:f8:fc:fc: dd:fd:43:0d:6e:e8:85:7f:fc:71:2d:a4:03:c7:53: 12:df:ff:16:61:c1:d1:52:bd:21:c0:8f:89:fb:c8: bd:a5:9b:70:9e:e3:24:7f:48:00:ba:01:66:ad:f9: ce:56:0d:d6:2e:4a:83:d2:38:40:1e:36:13:a8:00: 90:c6:08:88:0e:fb:81:fc:79:52:4a:99:cb:61:98: aa:e0:87:7c:e1:41:40:55:40:d7:b9:0e:d5:c2:c3: 94:b7:4e:6c:61:f9:af:33:38:f4:66:59:a2:d8:8d: 4e:eb:17:49:d0:9f:66:b3:d0:9a:fc:fc:20:37:1c: 4c:80:1a:93:c5:e4:de:10:a7:78:7f:a5:64:4e:8e: 1f:75:9f:5c:b7:c2:da:e1:31:49:81:77:5b:21:b4: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:76:76:59:7A:A7:A4:15:16:08:42:B1:AF:01:3A:50:41:04:C2:43 X509v3 Authority Key Identifier: keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c5:c8:72:be:7c:07:86:a5:65:f7:17:b4:20:4a:b6:32:86: 05:8b:d3:85:15:92:2e:ee:02:f5:98:3a:a0:9d:9a:f0:61:88: cd:5b:0f:a3:03:4c:e5:c6:44:31:44:aa:37:b8:72:5d:72:a6: 69:f8:73:fa:64:1f:f0:2b:29:48:8c:23:88:a1:b5:f9:86:88: 4f:9f:6a:b2:41:99:01:88:79:1e:4a:2d:40:c9:2d:fa:65:71: 3a:0b:4a:9e:55:ab:32:59:39:ec:c0:b1:c2:36:97:56:35:a8: 0e:1e:32:37:5a:8f:fa:55:a9:6f:c4:0e:96:ac:25:6c:de:a5: 45:d2:ae:93:a3:ad:53:bb:00:5e:9e:a6:b5:1e:f4:ed:a7:14: 65:33:31:b3:ba:7f:3b:52:e8:29:9c:dc:e7:ec:36:bd:12:e8: d8:32:d4:5a:54:e7:bb:65:bb:c2:46:d0:a2:d2:fd:ae:e7:4c: c5:c0:04:6a:4a:fa:2a:ef:d0:67:d7:a6:57:34:62:84:43:3a: 1d:41:2e:3b:cd:e8:3f:fb:99:09:09:c9:ae:ad:e4:aa:8b:b7: e9:73:34:7f:50:50:6a:b4:a7:af:82:ea:d7:82:ec:77:4f:42: 74:ca:f5:45:eb:ab:20:44:ea:bd:73:f9:6c:b8:5b:94:68:00: ac:59:2e:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5v8VVuY7aZ2UHZA6EK46nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm ZWI2MWIwHhcNMjYwMTI2MTAwMDUzWhcNMjYwMTI3MTAwMDUzWjAzMTEwLwYDVQQD Eyg2NTc2NzY1OTdhYTdhNDE1MTYwODQyYjFhZjAxM2E1MDQxMDRjMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iIras2S72ww+vSrCDTIB2emYNxs 7oyA2fWBM6eEbxcxvhAUQtZ5POb2eV6fuRYGX+9CNmkSBD7WKSdpK8YOEQ5eGj8L N+MkLdm0lteEqOMheE3mT81fGFJGbJ4z15olIh7LNz74/Pzd/UMNbuiFf/xxLaQD x1MS3/8WYcHRUr0hwI+J+8i9pZtwnuMkf0gAugFmrfnOVg3WLkqD0jhAHjYTqACQ xgiIDvuB/HlSSpnLYZiq4Id84UFAVUDXuQ7VwsOUt05sYfmvMzj0Zlmi2I1O6xdJ 0J9ms9Ca/PwgNxxMgBqTxeTeEKd4f6VkTo4fdZ9ct8La4TFJgXdbIbQEWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV2dll6p6QVFghCsa8BOlBBBMJDMB8GA1UdIwQY MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt MWRjYzg2YzExZTc0LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0 LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMXIcr58 B4alZfcXtCBKtjKGBYvThRWSLu4C9Zg6oJ2a8GGIzVsPowNM5cZEMUSqN7hyXXKm afhz+mQf8CspSIwjiKG1+YaIT59qskGZAYh5HkotQMkt+mVxOgtKnlWrMlk57MCx wjaXVjWoDh4yN1qP+lWpb8QOlqwlbN6lRdKuk6OtU7sAXp6mtR707acUZTMxs7p/ O1LoKZzc5+w2vRLo2DLUWlTnu2W7wkbQotL9rudMxcAEakr6Ku/QZ9emVzRihEM6 HUEuO83oP/uZCQnJrq3kqou36XM0f1BQarSnr4Lq14Lsd09CdMr1ReurIETqvXP5 bLhblGgArFkusw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:51 2026 by rpki-client